Hackers Exploit QNAP Devices: Active Exploitation of QNAP VioStor NVR Vulnerability Discovered

The increasing reliance on network-attached storage (NAS) devices has made them an attractive target for hackers. QNAP devices, in particular, have become a favored choice for attackers due to their susceptibility to known vulnerabilities and misconfigurations. In this article, we delve into the latest findings by cybersecurity researchers at Akamai, who have discovered active exploitation of the QNAP VioStor Network Video Recorder (NVR) vulnerability, exposing users to the notorious ‘Mirai’ malware.

Exploitation of QNAP VioStor NVR Vulnerability

During their research, the cybersecurity experts at Akamai uncovered that hackers have been actively taking advantage of the QNAP VioStor NVR vulnerability, which has been assigned the CVE-2023-47565 tracking number. This vulnerability has been marked as a ‘High’ severity flaw, with a CVSS v3 score of 8.0, emphasizing the significant risk it poses to users.

By utilizing an OS command injection technique, authorized attackers exploit this vulnerability by initiating a POST request to the management interface. By leveraging the device’s default credentials, they gain unauthorized access to the system, providing an entry point for malicious activities. This exploitation technique allows the attacker to deploy the notorious ‘Mirai’ malware, further compromising the device and potentially enabling it to become part of a botnet.

Recommendations by QNAP

In response to the active exploitation of the QNAP VioStor NVR vulnerability, QNAP has issued recommendations to mitigate the risk for its users. It is essential for users to upgrade their VioStor firmware, particularly on unsupported devices, to ensure they have the latest security patches. Additionally, changing default passwords offers an additional layer of protection against unauthorized access, thwarting potential hackers.

Discovery of Undisclosed Patched Issue

During the course of the InfectedSlurs campaign, the Akamai researchers discovered an undisclosed patched issue. While details remain undisclosed, this discovery highlights the continuous efforts by hackers to exploit vulnerabilities in QNAP devices, necessitating constant vigilance by both users and manufacturers.

SIRT Identifies QNAP VioStor NVR Devices as Targets

The Security Incident Response Team (SIRT) has identified QNAP VioStor NVR devices as primary targets for exploitation. This underscores the importance of taking immediate action to address the known vulnerabilities and weaknesses in the device’s systems to prevent unauthorized access and subsequent compromise.

Confirmation of Targeted Retired VioStor Versions

Following collaboration with US-CERT and QNAP, it has been confirmed that retired VioStor versions, specifically those of 5.0.0 or earlier, are the primary targets of active exploitation. Attackers exploit a remote code execution vulnerability through a POST request to /cgi-bin/server/server.cgi. It is crucial for users utilizing these retired versions to take immediate action to mitigate the risk and protect their QNAP VioStor NVR devices.

Highlighting the Importance of Secure IoT Practices

The discovery of ongoing exploitation of QNAP devices highlights the significance of implementing secure Internet of Things (IoT) practices. Default credentials and outdated network systems create opportunities for botnet infections and expose users to new vulnerabilities. The need for improved IoT practices is evident in the case of legacy systems, which can become breeding grounds for malicious activities. Utilizing strong, unique passwords and regularly updating firmware can significantly mitigate such risks.

The active exploitation of the QNAP VioStor NVR vulnerability serves as a wake-up call for both QNAP device users and manufacturers. Proactive measures, such as promptly upgrading firmware and changing default passwords, can go a long way in safeguarding against unauthorized access and subsequent compromise. Continuous collaboration between researchers, manufacturers, and cybersecurity organizations is crucial in combating the evolving threats posed by hackers targeting IoT devices. By remaining vigilant and adhering to the best security practices, users can ensure a safer and more secure digital environment.

Explore more

Accelsius Advances Energy-Efficient Data Center Cooling Systems

As global demand for data-processing capacity continues to rise, the burden placed on data centers has never been greater. In an age where sustainability is gaining importance, one of the most pressing challenges faced by data center operators is minimizing the energy consumption dedicated to cooling operations. Accelsius, a leader in innovative cooling systems, has embarked on a significant project

Is Power Availability Now the Key to Data Center Success?

The past few years have witnessed a pivotal shift in the data center industry, where power availability has ascended as the primary factor influencing site selection for new data center projects. Historically, the focus for these centers was on marrying locale with accessibility to vital infrastructures such as highways and communication networks. However, with the advent and proliferation of artificial

Is Arizona the Next Hub for AI Data Centers?

In an ambitious move that underscores the relentless march of technological progress, venture capitalist Chamath Palihapitiya has joined forces with Anita Verma-Lallian and a cadre of investors to acquire a vast expanse of land in Arizona. This acquisition, totaling 2,100 acres and called Hassayampa Ranch, was secured for a substantial sum of $51 million. The initiative is not just a

How Can We Reduce Bias in Virtual Interviews?

In today’s digital era, virtual interviews have revolutionized the recruitment landscape, offering unparalleled opportunities for connecting with talent across the globe. While this shift to digital platforms has facilitated a more accessible interviewing process, it has also ushered in a new set of challenges, with bias standing as one of the most significant. These biases, often subtle and unconscious, can

How Is AI Transforming Windows 11 with KB5058499 Update?

The changing landscape of technology continually demands thorough exploration, especially regarding the evolution of computing systems such as Windows 11. With technological enhancements driving user expectations, updates like KB5058499 take center stage by integrating artificial intelligence to enrich user experience and productivity. This latest update introduces refinements poised to reshape daily computing tasks, making interactions more intuitive and efficient than